Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: KpLcewYYX/GTn5RFfJljjbuOXKgQ4lNax1W8ODutefY=
Subject key identifier: BE:4F:52:3A:49:9D:B9:43:EC:AF:CA:49:B0:F3:22:34:03:61:5A:E8
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0198D5833BB53AD2758AC73A27B576471803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 05F5
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: tm6cjmcRUR1VvzUycgOi8p8sKUdEof3U/rQnLH4jEBo=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3b:b5:3a:d2:75:8a:c7:3a:27:b5:76:47:18:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=be4f523a499db943ecafca49b0f3223403615ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:36:c3:08:4a:28:99:a3:19:0c:73:21:42:
b3:15:7c:77:d9:74:3d:b8:d4:eb:44:69:72:60:62:
fd:b5:c5:06:13:c3:d1:cc:20:40:2b:bb:4e:dc:fb:
61:91:26:ba:d7:53:2b:d1:c0:7a:fe:24:86:d6:44:
7d:f8:64:69:49:fb:67:56:b8:fb:d4:dc:1e:dd:ac:
7a:6d:00:4e:77:d2:04:81:ed:0d:db:90:f3:c0:27:
d5:fc:d0:9c:87:cc:87:cf:87:48:82:d9:91:4e:3a:
03:a9:48:77:b2:3c:ff:11:fa:d9:b4:68:82:93:76:
de:34:c3:10:6e:f2:24:1c:49:63:60:92:39:0c:48:
59:02:2c:35:21:11:de:23:0d:35:02:48:2f:d0:40:
30:b2:0d:bf:5d:5d:34:93:cd:c4:4c:34:69:e1:d8:
29:41:18:0f:da:96:a6:b7:2b:28:a9:61:18:15:08:
e7:90:c5:77:30:be:57:09:d5:b2:9c:d0:a6:b9:35:
a6:df:c8:cf:20:24:ae:0d:19:12:ab:83:b4:89:b7:
a6:f9:e3:20:7f:f5:83:6d:c0:1b:e8:a5:54:24:71:
f6:61:10:fa:b0:99:3f:eb:a7:db:79:d5:5b:ea:9c:
3d:4a:9b:66:61:5d:36:0b:27:e6:be:26:a7:f7:30:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:52:3A:49:9D:B9:43:EC:AF:CA:49:B0:F3:22:34:03:61:5A:E8
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bd:4b:df:62:9c:0d:6e:63:3e:e6:c7:f7:0b:50:32:da:a9:
43:8f:0b:80:a4:c4:75:e7:f6:90:09:17:7a:8d:d2:e1:12:bd:
38:ec:63:16:aa:d6:1e:3a:3b:f6:48:ce:3a:a3:c5:8a:22:38:
5b:89:b5:e8:eb:6f:d2:56:e0:63:0a:44:6f:b1:10:f7:3f:9b:
4a:78:ea:50:02:f7:d4:fe:52:78:b9:76:84:bb:55:a3:14:3a:
be:78:e3:40:41:b2:fd:dd:b3:aa:85:d0:6f:71:6c:b6:41:2e:
e9:c1:99:dc:89:72:15:c9:ac:a6:75:58:76:84:f2:6d:6b:34:
35:c2:e6:3c:b7:31:11:ae:df:a9:5d:20:61:6c:09:53:01:dc:
2e:a4:bc:5b:b5:a0:b7:e1:52:7c:f1:7b:cf:d3:98:21:2c:c8:
11:16:1d:56:d9:d0:85:33:d3:b7:3b:25:2b:7a:a8:af:23:0c:
07:2b:b5:11:95:cf:31:f1:75:34:e8:72:bc:8c:98:74:24:13:
b5:d4:d5:be:79:90:02:88:4e:fe:01:bc:2f:17:38:0a:b9:06:
4d:2e:ab:3b:5e:fc:2b:3a:53:11:8b:d1:56:d1:44:cc:f1:22:
04:7c:ff:c1:b1:f9:ac:2d:f5:52:fd:29:b0:6c:cf:12:e0:cf:
37:4c:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:45 2025 by rpki-client